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Abstract 

We consider the problem of search of an unstructured list for a marked element x, when 
one is given advice as to where x might be located, in the form of a probability distribution. 
The goal is to minimise the expected number of queries to the list made to find x, with respect 
to this distribution. We present a quantum algorithm which solves this problem using an 
optimal number of queries, up to a constant factor. For some distributions on the input, such 
as certain power law distributions, the algorithm can achieve exponential speed-ups over the 
best possible classical algorithm. We also give an efficient quantum algorithm for a variant of 
this task where the distribution is not known in advance, but must be queried at an additional 
cost. The algorithms are based on the use of Grover's quantum search algorithm and amplitude 
amplification as subroutines. 

1 Introduction 

Grover's algorithm for search of an unstructured hst is one of the greatest successes of the nascent 
field of quantum computation [5] . The algorithm operates in the black box model: given access to 
a function / : {1, . . . ,n} — » {0, 1}, where / is promised to take the value 1 on precisely one input 
X, it finds X with certainty using 0{^/n) queries to /, whereas any classical algorithm requires U{n) 
queries to perform the same task. However, it is rarely necessary to search the type of databases 
that we encounter in real life in a completely unstructured fashion. Instead, there is often some 
prior information about the location of the sought ("marked") item x, which can be used to guide 
the search. We can formalise this intuition by considering a search problem where the searcher is 
given access to a probability distribution, which hints where the marked item is likely to be. 



Problem: Search with Advice 

Input: A function / : {1, . . . , n} {0, 1} that takes the value 1 on precisely one input x, and 
an "advice" probability distribution fi — {py), y € {1, . . . ,n}, where Py is the probability that 

fiy) = 1- 

Output: The marked element x. 



It is clear that knowledge of fj, can enable a classical algorithm to achieve a significant reduction 
in the average number of queries to / (with respect to /i) required to find the marked element x. 
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This paper is concerned with the development of quantum algorithms for the Search with Advice 
problem which also use fi, and which obtain significant speed-ups over any classical algorithm. 

We distinguish two models for the complexity of this problem. In the first model - the known 
model - /I is known completely beforehand, and can be used to help design an algorithm to find 
the marked element. The complexity of the problem is given by the minimum expected number 
of queries to / required to find x, under the distribution fi. In the second model - the unknown 
model - /i is not known before the algorithm starts, but the algorithm is also given access to a black 
box which outputs samples from fj., at unit cost. In the case of quantum algorithms, the black box 
outputs a coherent superposition corresponding to /i (a "quantum sample" ) . 

In both cases, note that we are interested in the average number of queries with respect to fi 
required to find the marked element, rather than the worst-case number of queries. Previous work 
has shown that, if one considers the worst-case number of queries to the input required to compute 
any total function, there can only be at most a polynomial separation between quantum and classical 
computation [5] . Considering the average number of queries required (over the input) allows one to 
sidestep these results and hope to obtain exponential speed-ups. 

Indeed, previous work of Ambainis and de Wolf T has shown that quantum algorithms can 
achieve exponential (or even super-exponential) reductions in average-case query complexity over 
classical algorithms. The model that these authors considered was that of computing a particular 
boolean function / : {0, 1}" — > {0, 1}, with a particular (known) distribution on the inputs. Among 
other results, they exhibited a (function, distribution) pair with a super-exponential separation 
between quantum and classical query complexity, and even gave a function whose quantum and 
classical query complexity were exponentially separated under the uniform distribution. 

1.1 New results 

The main results of this paper are as follows. First, in the known model, we give a quantum 
algorithm for Search with Advice which is optimal up to constant factors. Assuming without 
loss of generality that the probability distribution /i — (p^) is given in non-increasing order, the 
algorithm uses an expected number of queries to / which is of the order of 



For certain probability distributions, this represents an exponential (or even super-exponential) 
improvement in the expected number of queries used. The quantum algorithm is based on the use 
of an exact variant of Grover's algorithm [6l [H |4] as a subroutine. Known lower bounds on the 
query complexity of quantum search are used to show that this algorithm is optimal, up to constant 
factors, for any probability distribution fi. 

In the unknown model, we give a quantum algorithm that uses a expected number of queries of 
the order of 



Again, this algorithm is sometimes significantly more efficient than the best possible classical algo- 
rithm. The algorithm is based on the amplitude amplification algorithms proposed by Boyer et al [3] 
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which should be compared with the optimal classical expected number of queries, 
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Figure 1: Query complexity of Search with Advice in different models, for power law distributions 
Pa; oc x^^ . For each fc, the query complexity of the algorithms given in this paper is for some 

OL (ignoring log factors); the graph plots the exponent a against fc. Dotted red line: best classical 
algorithm; solid green line: quantum, known probability distribution; dashed blue line: quantum, 
unknown probability distribution. 



and Brassard et al ^ ; the main difference being that after performing a certain number of iterations 
of amplitude amplification, it reverts to exact Grover search. This can considerably improve the 
average query complexity. 

These results in the two different models are applied to the natural class of power law distributions 
•px oc , for some constant A; > 0. We will see that for certain values of fc, quantum algorithms 
deliver very significant reductions in the average number of queries used. In particular, when —2 < 
k < —3/2, a super-exponential separation between quantum and classical computation is obtained 
in the known model (0(1) vs. f2(n'^+^)). The results for power law distributions are summarised in 
Figure 11.11 (with details given in Propositions 12.51 and 13.41 below) . 

The paper is organised as follows. After defining the models and notation used, Section[2]contains 
the results on the known model, while Section [3] studies the unknown model. Various proofs are 
deferred to an appendix. 

1.2 Models and notation 

In this section, we set up concepts and notation that will be used throughout the paper. We assume 
familiarity with quantum computation [10] , and in particular the concept of query complexity [5] : 
the number of queries to the input which a classical or quantum algorithm requires to compute some 
function. Let [n] denote the integers {1, . . . and consider an oracle function /:[«]—> {0, 1} 
which is promised to take the value 1 on precisely one input x € [n] (that is, /(y) — ^xy)- We 
say that x is the marked element. Also consider a quantum or classical algorithm A which, given 
access to /, attempts to output x. We say that ^ is a valid algorithm if, for any / satisfying the 
above constraint, A outputs x with certainty. Let V denote the set of valid deterministic classical 
algorithms, and let Q denote the set of valid quantum algorithms. 

Let fi = (px) be a distribution on [n] giving the probability for the marked element to be found at 
each location. We will be concerned with understanding the average number of queries to the input 
required to find x. This will only depend on /z, and will hence be termed the (average-case) query 
complexity of fi. The general model of average-case query complexity used here will be similar to 
that in [T, with some minor differences. We distinguish two models for the Search with Advice 
problem: a known model and an unknown model. In the known model, the probability distribution 
fi is known beforehand, and can be used to design the algorithm. In the unknown model, fi is not 
known, and the algorithm must query an oracle to gain information about fi. 
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We first define the known model. Let ^ be a valid algorithm, and let Tj^^{x) denote the expected 
number of queries to / used by when x is the marked element. Note that, in order for this model 
to be interesting in the case where ^ is a quantum algorithm, intermediate measurements during 
the search process are allowed; otherwise, A would always use the same number of queries. Further, 
let Tj({^) be the expected number of queries to / used by A, where the expectation is taken over 
both the distribution /i and (potentially) A^s internal randomness. That is, 

n 
x=l 

Finally, we define the main quantities of interest, the deterministic and quantum (respectively) 
average-case query complexities of /i. 

■D(m) = minr4(pi), 
Q{n) = minT4(^). 

The restriction to algorithms that succeed with certainty makes this a zero-error {Las Vegas) notion 
of average-case query complexity. It is common to consider an alternative Monte Carlo model of 
query complexity where A is allowed to err with some constant probability (e.g. 1/3). Note that 
this would not change the model significantly in the case of the current problem: given a (classical 
or quantum) Monte Carlo search algorithm that uses t queries and outputs x with probability p, 
one can produce an algorithm that succeeds with certainty and uses an expected number of queries 
of at most [t + \)/p [51 Exercise 1.3]. 

We now turn to the unknown model. In this scenario, as well as querying /, we allow A to sample 
from jjL using an oracle. In the case of quantum algorithms, we allow the preparation of quantum 
samples; that is, in the quantum case we define an oracle O^, which performs the mapping 

n 

OjO) = |/i) :=^^|x). 

x=l 

The algorithm is also given access to the inverse operation, . We define T^(a«) as the expected 
total number of queries to /, and used by A (a query to each oracle being counted as unit 
cost). The oracle may appear somewhat unrealistic. However, it can be implemented if one has 
the ability to sum the distribution /i over arbitrary ranges [7]. That is, given an efhcient means of 
computing Y^x=aPx arbitrary a, 6, one can implement efficiently. 

Finally, we will make use of an exact variant of Grover's quantum search algorithm throughout 
this paper. 

Theorem 1.1 (Grover H0yer 0, Brassard et al ^). Given an unstructured list of n elements 
that contains a unique marked element, there is a quantum algorithm that finds the marked element 
with certainty using \j\/n~\ queries to the list. If the list is promised to contain either one or zero 
marked elements, the marked element can be found (or "no marked element present" returned) with 
certainty using one extra query. 

2 Search with a known probabiUty distribution 

In this section, we will assume that px is non-increasing with x (so the most likely place for the 
marked element to be is at the start of the list, etc.). With this assumption, the optimal classical 
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algorithm to find x is simply to query /(I) through /(?^) in turn, so the classical average-case query 
complexity can be written down as 

n 

D{fi)=Y,P-^- (1) 

x=l 

Note that, classically, the algorithm obtains no benefit fi'om the use of randomness. When fi is the 
uniform distribution, corresponding to having no information about the location of the marked item, 
Grover's algorithm (Thcorcm ll.ip achieves a quadratic reduction in average-case query complexity. 
However, nai've use of this algorithm does not give an advantage in the average-case setting in 
general. In the next section, we give a quantum algorithm which does significantly improve on the 
trivial classical algorithm above. 

2.1 Geometric search algorithm 

We now give an algorithm for the Search with Advice problem, which will turn out to be 
asymptotically optimal. The quantum component of this algorithm is in fact simply Grover search 
(Theorem II .ip . Informally, the algorithm consists of splitting the input into blocks which increase 
in size geometrically (hence its name) and performing Grover search on each block. Interestingly, 
the algorithm does not need to know the precise advice probability distribution to achieve its near- 
optimal query complexity: it suffices to be able to sort the probabilities in non-increasing order. 
The algorithm is parametrised by a constant k, which gives the ratio of the geometric progression. 
We optimise k below; however, changing k only affects the query complexity by a constant factor. 



Algorithm 1: Geometric quantum search 


Input: Advice distribution /i = (px) in non-increasing order; function / : [n] — > {0, 1 


} such 


that / takes the value 1 on precisely one input x; real fc > 1 




Output: The marked element x 




start <— 1; 




end <— 1; 




step <— 0; 




while start < n do 




perform exact Grover search for one or zero marked elements on subset {start, . . 


. , end}; 


if marked element found then 




return marked element; 




end 




step <— step + 1; 




start ^ end + 1; 




end ^ mm(start + [k^*'^P\ — 1, n); 




end 




return error; 





Proposition 2.1. The average number of queries used by Algorithm]^ choosing fc = e 2.718, 
an advice distribution fi — (p^) is upper bounded by 



5 



Proof. In the 77i'th iteration of the loop, the (at most) [A:"^J elements contained in the range 



m— 1 



Rm = {1 + E L^'J ' ■ ■ ■ ' min(Lfc™J - W\ , «)} (2) 



will be searched. By Theorem 11.11 the Grover search step in this iteration uses j ^ [fc™J 
queries. Then, for any marked element x g Rra^ a total of at most 



E ( il V^fc^l + l) ^ 2(m + 1) + J 5] A; 



s=0 



queries will be used by Algorithm[T]to find x. It is clear from ^ that, for any a; € to < logj. 
The average-case query complexity is therefore upper bounded by 

$:pj21og,x + 4+J E 

x=\ \ s=0 

and, estimating the inner sum by an integral, we obtain an upper bound of 

vrfc 



E^p, f 2 logfe a: + 4 + J fc"/2 ^^Yvx (^logfc X + 2 



41nfc 

Picking fc = e, and noting that Inx + 2 < '^\fx for all a; > 0, completes the proof. □ 
2.2 Optimality of the geometric search algorithm 

We now show that Algorithm [T] is in fact optimal, up to a constant factor. This result will rely on 
the following known exact bound on the query complexity of quantum search. 

Theorem 2.2 (Grover [6], Zalka T2]). Let f : [n] {0, 1} be a function that takes the value 1 on 
precisely one input x, and let A he a quantum search algorithm that uses T queries to f and outputs 
X with probability at least p, for all x. Then 



T > 



3in^ 1 



2 arcsin(l/Y^) 2 
and this number of queries is achieved by Grover 's algorithm. 

As stated, this bound involves worst-case query complexity (that is, the largest possible number 
of queries used by A, on the worst possible input). In our setting, we will need to lower bound 
the expected number of queries used by A on the worst possible input. This can be done with the 
following proposition. 

Proposition 2.3. Let A be a valid quantum search algorithm such that T^{x) < T for all x, for 
some Tq. Then 

T > '^/^^^ ^ - 0.316 > 0.206Vn - 1. 

arcsm l/\/n 



Proof. Let t_A.{x) be the random variable giving the number of queries used by A on input x. 
Thus T^{x) = ¥,tj^{x), where the expectation is taken over ^'s internal randomness. By Markov's 
inequality, for all x and all < p < 1 , 

Pr[tAix)>TA{x)/il-p)] < (l-p). 
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Thus a quantum search algorithm A that uses an expected number of at most T queries on aU x 
gives a bounded-error quantum search algorithm that uses at most T/(l — p) queries on all x and 
succeeds with probability at least p: just run A until it has used T/ (1 — p) queries, and if it has not 
output X, output a random integer between 1 and n. By Markov's inequality, this will succeed with 
probability at least p. 

So, by Theorem 12.21 we have that for any < p < 1 

arcsin y/p 1 \ 

2arcsin(l/Y^) 2/ 

Performing numerical maximisation of the right-hand side over p, one finds that for large n the 
maximum is achieved at p ~ 0.369, which proves the proposition. □ 

Note that it is known that one can indeed achieve an expected query complexity that is somewhat 
less than the usual worst-case query complexity guaranteed by Grover's algorithm [3l [12]. By 
stopping and restarting Grover search, it is possible to find the marked element x using approximately 
0.690-\/n expected queries on all x, whereas straightforward use of Grover's algorithm guarantees 
approximately 0.785-^71 queries. 

We are now ready to prove that Algorithm [T] is asymptotically optimal. 
Proposition 2.4. Let fi — (px), x £ [n] be an arbitrary probability distribution. Then 

n 
x=l 

Proof. Let A he a valid quantum search algorithm and assume that /i is non-increasing. We aim to 
lower bound Tj^{ii) = ^^^iP^"^^^^)- Proposition 12.31 there must exist a y such that Tj^{y) > 
0.206^/ri— 1- Similarly, there must exist y' ^ y such that Tj({y') > 0.206^?^ — 1 — 1 (or A would be 
able to find a marked element in the set of all elements not equal to y, using a number of queries 
that violates Proposition 12. Sp . Iterating this argument, we see that for each k such that 1 < k < n 
there exists an x such that Tj\^{x) > 0.206VX — 1. By a rearrangement inequality, this implies that 

n 

Ta{h)>J2px{0 -206^^-1) 

x = l 

and proves the proposition. □ 



T>{l-p) 



2.3 Power law distributions 



We now apply Algorithm [T] to a natural class of probability distributions: power law distributions. 
We will see that significant speed-ups can be obtained over any possible classical algorithm. 

Proposition 2.5. Let /i = {Px), x € [n\ be a probability distribution where px oc x^ for some 
constant k < 0. Then 



D{l^) = { 



e(n) 

Q{n/ logn) 

e(logn) 
6(1) 



[-l<k< 0] 
[fc = -l] 
[-2<k< -1] 
[k = -2] 
[k < -2] 



and Qip) = < 



e(v^) 

Qiy/n/ logn) 

0(logn) 
9(1) 



[-K fc < 0] 
[fc = -l] 
[-3/2 < A: < 
[k = -3/2] 
[k < -3/2] 



Proof. Deferred to Appendix. 



□ 
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Corollary 2.6. There exists a probability distribution n such that D{^) — r2(n^/^ for arbitrary 
e > 0, but Q{n) = 0(1). 

Proof. Take k = —3/2 — e in Proposition 12. 51 (Indeed, any k £ (—2, —3/2) gives a super-exponential 
separation between D(fi) and Q(/i).) □ 



3 Unknown probability distribution 

In this section we switch to a different model, where the algorithm does not know the advice distribu- 
tion 11 in advance, but must use an oracle to obtain information about this distribution. We begin by 
noting the somewhat counterintuitive fact that a classical algorithm that merely queries / according 
to samples from the distribution /i performs no better than an exhaustive search algorithn{3- 

Indeed, consider a classical algorithm that consists of repeatedly obtaining a sample y from /z, 
then querying f{y). If x is the marked element, the expected number of samples from fi required 
until X is found is exactly 1/px (assuming that Px > 0). Thus the expected number of samples used 
is 

J2px (7) 

x=l ^P""^ 

the algorithm might as well have just carried out an exhaustive search to find x. Being given access 
to a quantum oracle producing a coherent superposition corresponding to the distribution /i, 
however, will turn out to be very useful. 

3.1 Quantum algorithm 

Our quantum algorithm will be based on the amplitude amplification primitive of Brassard et al [3] . 
For completeness, an explicit definition of amplitude amplification is given below, as Algorithm [5) 



Algorithm 2: Amplitude amplification [4] 



Input: Function f : [n] ^ {0, 1} such that / takes the value 1 on precisely one input x; 

oracle operator : |0) inverse 0~^; positive integer k (number of iterations) 

Output: The marked element x, or fail 
create initial state = O^|0); 
apply operator —Ofj,I\o)0~^ I\x) k times to 
measure in computational basis, obtaining outcome y; 

if f(y)^l then 

return y; 
else 

return fail] 
end 



The notation /|^^ denotes reflection about the state it is well-known that the operator I]^x)i 
where I\x)\y) ~ {^'^y^^^\y) ^ can be implemented using one query to /. The following result was 
shown by Brassard et al in [?j (with somewhat different terminology). 

^This phenomenon was recently discussed in the somewhat different context of screening for terrorists 
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Lemma 3.1. Applying Algorithm\^ with k iterations returns the location of the marked element 
with probability sin^((2fc + 1) axcsm ^/p^) , using fc + 1 queries to Of^, k queries to O^^ , and fc + 1 
queries to f. 

We now use Algorithm [2] as a subroutine in an algorithm which finds the marked element with 
certainty, and takes advantage of to reduce the expected number of queries used. The algorithm 
is a modified version of previous "exponential searching" algorithms of Brassard et al [4] , and Boyer 
et al [3] . The main difference is that the algorithm gives up after a certain number of iterations and 
reverts to the exact variant of standard Grover search [H |4] . This change can make a significant 
difference to the overall query complexity. The algorithm is stated as Algorithm [3] below. 



Algorithm 3: Quantum search with imknown probability distribution 



Input: Function f : [n] {0, 1} such that / takes the value 1 on precisely one input x; 

oracle operator : |0) inverse 0~^; real fc > 1 

Output: The marked element x 
for j = to [logj, y/n\ do 
sample from distribution fi; 
if marked element found then 

return marked element; 
end 

pick i uniformly at random from integers {0, . . . , [fc-'J — 1}; 
perform i iterations of amplitude amplification; 
if marked element found then 

return marked element; 
end 
end 

perform exact Grover search for one marked element on [n] ; 
return marked element; 



It will turn out to be possible to give a close analysis of the expected query complexity of 
Algorithm^ including constants (which we will round to integers; these could be optimised further). 
The analysis follows the approach taken by Boyer et al to bound the performance of their quantum 
search algorithm for an unknown number of marked elements. 

Proposition 3.2. On input x, when called with fc w 1.162, Algorithmic uses an expected number of 
at mosi minjSS/y^ + 4/3, SS-^n} queries to each of f, O^, . 

Proof. Deferred to Appendix. □ 
Corollary 3.3. Let A denote Algorithmic Then there are constants K , L, M such that 

miA<K{ Vp^\+lvtA pA+m. 

Proof. Apply Algorithm [3l and use Proposition 13. 21 to calculate the average number of queries used 
with respect to the distribution /i. □ 
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3.2 Power law distributions 



As with the case of a known probabihty distribution, power law distributions provide a natural class 
of examples for search with an unknown probability distribution. For some of these distributions, 
Algorithm [3] can be used to obtain significant speed-ups over any classical algorithm, even one with 
complete knowledge of the distribution. 

Proposition 3.4. Let ji — (px) be a probability distribution where Px oc for some constant k < 0, 
and let A denote Algorithmic Then 



o(V^) [-1 < fc < 0] 

0(n-(i/2+i/fc)) [-2<fc<-l] 

O(logn) [fc = -2] 

0(1) [fc < -2] 



Proof. Deferred to Appendix. □ 
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Appendix 

In this appendix we collect some proofs from throughout the paper. 
A.l Proofs from Section [2] 

Proposition 2.5. Let p — (px), x € [n] be a probability distribution where px oc x^ for some 
constant k < 0. Then 



' e(n) [-K fc < 0] 

e(n/logn) [fc = -l] 

D{p) = <^ e(n'^+2) [-2 < fc < -1] , and Q{pL) = < 

e(logn) [fc = -2] 

. 0(1) [fc < -2] 



' e(^A^) [-K fc < 0] 

e(V^/logn) [fc = -l] 

0(^fc+3/2) [_3/2 < A: < -1] 

e(logn) [fc = -3/2] 

9(1) [fc < -3/2] 



Proof. From the statement of the proposition, px — ax'^ for some a. We first estimate the normal- 
ising constant a. The constraint that '^2=iPx = 1 implies that 1/a = X]"^!^'^- Estimating this 
sum by an integral, we have that 



J x'^dx <l/a<l + J 



X dx, 



implying that, for fc — 1, 

—, — < 1/a < —, — + 1- 

fc + 1 ' fc + 1 

By (P), if it also holds that fc 7^ -2, 



D{pL) =aY^ x^^+i > a / x^-'+i dx > 
x=i -^1 



(„fc+2 „ l)(fc+ 1) 

{nk+^ +k){k + 2)' 
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The upper bound on D(fi) is very similar. It is easy to see that this proves the deterministic half 
of the proposition, except for the cases fc = — 1 and k — —2, which can be verified directly. In the 
quantum case, by Proposition [^Hl for k ^ —1, —3/2, 



7re 



(jjfc+i _ i)(fc + 3/2) 

Again, the lower bound is similar and the special cases k = —1, k = —3/2 can be verified directly. □ 



A. 2 Proofs from Section [3] 

In this section, we give the proof of Proposition 13. 21 which bounds the performance of Algorithm [3l 
We will need a lemma of Boyer et al 3 , which we translate into our terminology. 

Lemma A.l (Boyer et al [3j). // an integer r is picked from the range {0, . . . , m — 1} uniformly 
at random, and r iterations of amplitude amplification are performed, the probability of finding the 
marked element is exactly 

^ 1 sin(4TO arcsin 

In particular, Pm > 1/4 whenever 

1 

m > — , =■ 

We are now ready to prove Proposition 13.21 The proof is similar to a result of Boyer et al [3] , 
but with somewhat more detail. 

Proposition 3.2. On input x, when called with k « 1.162, Algorithm\^uses an expected number of 
at most min{83/Y^pJ^ + 4/3, 53-yn} queries to each of f, O^, O^^ . 

Proof. We upper bound the expected number of queries to / used by Algorithm [31 which implies 
the same bound on the number of queries to and O^^. The bound will be in terms of fc, and 
eventually minimised over k such that 1 < fc < 4/3. However, changing fc will only change the 
number of queries used by a constant factor. Let Tj denote the expected number of queries to / 
used if the marked element is found in the j'th iteration of the loop. Then 



-1 



[fc'J + 3 ^ fcJ' 



an inequality which holds for 1 < fc < 4/3 and can be proven by induction on j. 

We first find an upper bound by considering the worst-case number of queries used. If it has 
not been found previously, the marked element is guaranteed to be found in the last, exact Grover 
search step. Thus the number of queries to / used is at most 

Llogfc\/nJ+l _ -, LlogfcV"J+l _ / l2 



^ 4^ - fc- 1 ^ 



,(fc-l)2 4 



This deals with one half of the statement of the proposition. For the remainder of the proof, we 
restrict to the case px > 1/n (as the case px < 1/n will be covered by the above bound), and also 
assume that px < 3/4; this assumption will be removed at the end. 



11 



We now assume that the "sample from distribution /i" step always fails (this can only increase 
the number of queries used) . The expected number of queries to / used by Algorithm [3] is then 
upper bounded by 

j=0 \i=0 / \ i=0 J 

To bound this expression, we split the first sum into two parts. First, we have 



j=0 \i=0 

Using Lemma [A. II and the fact that px < 3/4, it holds for j > [logj, l/-i/p^J + 1 that 



Lfe'J 



< 



i=0 



Thus 



fc 



< 



fc- 1 



Liogfc V"J 

E 

i= Liogfc i/Vp^J+i 



i-Liogfc i/Vp^J-i 



< 



fc /4 



< 



fc - 1 V3 
4fc2 



3fc 



fcJ' 



i+Liog;. i/Vp^J+i 



1 



(fc - l)(4-3fc) VP^' 



and also 



^Liogfc 

n (1 - ^Lfc'j) (^Liogfc + 



i=0 



< 



< 



< 



Liogfc v^j - [logfe 



gX logfc Vn-logj. 

4fc 7r\ 1 4 



^Liogfc ysj+i + 



fc TT , , 

+ T V" + 1 



fc- 1 4 



3(fc-l) 3/ 3 



where we use again the restriction that px > 1/n. Combining these bounds gives the following 
overall upper bound on the expected number of queries used: 



fc 



4fc2 



4fc 



7r\ 1 4 



fc-1 (fc-l)(4-3fc) 3(fc-l) 3 
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Minimising the bracketed expression over k using simple calculus gives that the minimum is found 
at A; ~ 1.162; for this value of k, we obtain a bound on the expected number of queries used that is 
approximately 

82.646 4 

+ 



Vp^ 3 

Finally, consider the case that Px > 3/4. In this case, one can find a bound by assuming that only 
the sampling step in each iteration of the loop can succeed, and ignoring the amplitude amplification 
step. Using this assumption, the number of queries to / used is upper bounded by 



which is readily seen to be upper bounded by 



4 



3 k n 

2 + -. 



(fc-l)(4-fc) fc-1 4' 

Inserting the previously found value of fc, fc « 1.162, gives an upper bound of an expected « 16.500 
queries used in this case, and completes the proof. □ 

Proposition 3.4. Let fj, — [px] be a probability distribution where Px oc x*^ for some constant k < 0, 
and let A denote Algorithm\^ Then 



0{y^) [-1 < fc < 0] 

_ J 0(n-(i/2+i/fc)) [-2 < fc < -1] 

O(logn) [fc = -2] 

0(1) [k < -2] 



Proof. As in the proof of Proposition [^31 Px — ax'^ for some a, and for fc ^ — 1, 

k + 1 

Define xq — max{x G [n] : px > 1/^} ~ [{an)~^^^\. Then, by CorQllarv l3.3[ 

xo n 
x — l x—x^ + l 

for some constants L, M, implying that for k ^ —1, k 7^ —2, 

Q*{n) < K^/^(l + J x''/^ dxj + LaV^ J x'' dx + M 

fe/2+l\ .ATr„fe+l _ 



i'=+i-ll k + 2 k + 2 n'=+i-l 



Now note that 



n{k + l)Y^^'' 



is 0(n) for k > —1, and 8(rt~^/'^) for k < —1. Inserting this into the previous expression we obtain 
the claimed results for the cases k —1, k ^ ~2. These remaining special cases can be verified 
directly. □ 



13 



References 



A. Ambainis and R. de Wolf. Average-case quantum query complexity. J. Phys. A: Math. Gen., 
34:6741-6754, 2001. quaiit-ph/9904079, 

R. Beals, H. Bulirman, R. Clave, M. Mosca, and R. de Wolf. Quantum lower bounds by 



polynomials. J. ACM, 48(4):778-797, 2001. quant-ph/9802049 



M. Boyer, G. Brassard, P. H0yer, and A. Tapp. Tight bounds on quantum searching. Fortschr. 
Phys., 46(4-5) :493-505, 1998. quant-p h/9605034| 

G. Brassard, P. H0yer, M. Mosca, and A. Tapp. Quantum amplitude amplification and estima- 
tion. Quantum Computation and Quantum Information: A Millennium Volume, pages 53-74, 
2002. quant-ph/0005055, 

H. Buhrman and R. de Wolf. Complexity measures and decision tree complexity: a survey. 
Theoretical Computer Science, 288:21-43, 2002. 

L. Grover. Quantum mechanics helps in searching for a needle in a haystack. Phys. Rev. Lett., 



79(2):325-328, 1997. quant-ph/9706033 



L. Grover and T. Rudolph. Creating superpositions that correspond to efficiently integrable 
probabihty distributions, 2002. |quant-ph/0208112( 

P. H0yer. Arbitrary phases in quantum amplitude amplification. Phys. Rev. A., 62:052304, 
2000. quant-ph/0006031, 

R. Motwani and P. Raghavan. Randomized algorithms. Cambridge University Press, 1995. 

M. A. Nielsen and I. L. Chuang. Quantum computation and quantum information. Cambridge 
University Press, 2000. 

W. H. Press. Strong profiling is not mathematically optimal for discovering rare malfeasors. 
Proceedings of the National Academy of Sciences, 106(6):1716-1719, 2009. 

C. Zalka. Grover's quantum searching algorithm is optimal. Phys. Rev. A., 60(4):2746-2751, 



1999. quant-ph/9711070 



14 



